$ rpki-client -vvf repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft File: 8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft (raw, json) Hash identifier: VgiVbtCKMU8y4YnutHRAJCSOX3KI1ums3ouu7DYZLnI= Subject key identifier: 88:C5:A1:CE:DF:D3:AC:28:25:99:60:E8:20:21:3B:92:B3:EA:E7:A5 Authority key identifier: 8B:E1:F5:0A:90:93:8A:E6:D4:E6:D7:A6:A2:A2:2F:00:3B:07:2E:D8 Certificate issuer: /CN=8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8 Certificate serial: 65F7034419F4F2B61DB4F6DAF83D73944495B293 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft Manifest number: 02AD Signing time: Sun 15 Jun 2025 04:11:33 +0000 Manifest this update: Sun 15 Jun 2025 04:06:33 +0000 Manifest next update: Wed 18 Jun 2025 15:52:33 +0000 Files and hashes: 1: 8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.crl (hash: 0taq15mcM2NA7KBcoVIebvaB82e9q3WrJ29pgMPG3og=) 2: 3130332e392e3134342e302f32322d3234203d3e20313331373133.roa (hash: nMzdVlm6ZGdAK1jozyzuffucbvzwRK+67XvaYs5SssY=) 3: 323430373a363338303a3a2f33322d3430203d3e20313331373133.roa (hash: n6EnpwYdLmSL8WaVyIXMn7tuvtOoZcAKI7Mz6TbpG8E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.crl rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 15:52:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:f7:03:44:19:f4:f2:b6:1d:b4:f6:da:f8:3d:73:94:44:95:b2:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8 Validity Not Before: Jun 15 04:06:33 2025 GMT Not After : Jun 18 15:52:33 2025 GMT Subject: CN=88C5A1CEDFD3AC28259960E820213B92B3EAE7A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:be:99:4a:a0:e9:4c:d7:87:60:35:b1:5b:3b: 38:0b:14:81:b0:df:3a:3a:0b:1b:19:b9:a3:79:10: 9c:4c:7f:7a:3f:bc:96:77:8b:ac:eb:e8:a6:91:8e: a6:2b:7d:b2:e9:bb:51:c7:72:e3:8a:0f:83:8d:fc: 8c:71:21:ec:95:8d:a7:dc:a4:d1:47:a8:18:38:da: 6e:82:0e:fe:eb:95:6b:30:ff:2e:70:97:5a:eb:be: 33:e4:50:7c:eb:7d:5f:55:51:d4:af:18:24:45:bc: ae:bc:6c:4b:ce:d3:ed:74:46:d3:80:ea:bc:73:78: f9:67:13:d8:38:0f:23:8d:06:e0:51:18:83:83:b3: 7b:d1:de:f8:ed:98:97:65:e9:e5:d3:fd:c9:0b:a2: 1c:4c:c7:94:4b:40:26:84:9f:e1:eb:8a:1d:03:3a: 52:94:8c:3f:d4:8f:c7:5f:9d:9b:87:3f:c4:74:2a: 39:f5:fe:8e:10:4e:81:5c:22:0c:09:66:bb:e4:6f: 2b:85:1c:a8:4e:82:e3:07:7c:d3:43:cd:29:85:d4: b2:a7:d6:c8:55:5a:63:93:f0:31:a8:38:82:16:a7: 22:5d:f8:58:23:17:fa:05:a5:da:19:75:10:bd:68: c6:24:1b:2c:0c:46:01:e0:5a:88:46:7d:6a:01:cd: 7a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:C5:A1:CE:DF:D3:AC:28:25:99:60:E8:20:21:3B:92:B3:EA:E7:A5 X509v3 Authority Key Identifier: keyid:8B:E1:F5:0A:90:93:8A:E6:D4:E6:D7:A6:A2:A2:2F:00:3B:07:2E:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:cc:20:d5:aa:8e:e5:50:f0:9b:75:5a:8f:e7:63:35:1d:04: 82:9e:25:8d:a5:ae:d2:7a:79:c1:79:e4:4f:a1:19:f9:1d:6a: d7:f8:95:18:01:6b:11:bf:10:42:62:48:17:80:72:09:82:80: de:b9:83:3d:9d:77:20:c5:0a:9a:e4:87:e0:e2:02:a2:48:dd: da:ba:09:39:55:e7:ce:81:79:65:c7:f2:d1:31:eb:03:92:dd: 19:0b:38:3a:7c:a5:4c:cf:22:91:ec:d2:d7:a2:75:97:30:fb: aa:68:16:e0:41:45:26:6e:66:91:2c:dd:86:8d:d0:3c:bf:08: 59:31:06:66:4b:ec:8c:1e:2b:70:25:64:99:72:91:79:41:6d: e9:11:3b:7a:d4:94:c2:69:0b:55:ca:ea:ec:3e:8d:a6:38:4f: 26:f8:f0:06:80:f9:7f:59:0a:d4:69:61:44:7b:63:d8:3f:0a: 08:a3:ee:25:5c:14:86:bb:af:c5:5c:21:3f:09:85:31:70:56: b4:61:a8:62:c6:6d:6b:e1:ec:60:01:9e:71:bc:73:e0:44:04: 6c:38:c0:6e:8c:03:69:f2:8c:16:54:fb:23:ce:10:56:f5:7e: 3a:00:bc:aa:17:fc:03:f9:f2:98:0e:7b:00:cb:1b:a1:fb:52: be:c7:05:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZfcDRBn08rYdtPba+D1zlESVspMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFMUY1MEE5MDkzOEFFNkQ0RTZEN0E2QTJBMjJGMDAz QjA3MkVEODAeFw0yNTA2MTUwNDA2MzNaFw0yNTA2MTgxNTUyMzNaMDMxMTAvBgNV BAMTKDg4QzVBMUNFREZEM0FDMjgyNTk5NjBFODIwMjEzQjkyQjNFQUU3QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYvplKoOlM14dgNbFbOzgLFIGw 3zo6CxsZuaN5EJxMf3o/vJZ3i6zr6KaRjqYrfbLpu1HHcuOKD4ON/IxxIeyVjafc pNFHqBg42m6CDv7rlWsw/y5wl1rrvjPkUHzrfV9VUdSvGCRFvK68bEvO0+10RtOA 6rxzePlnE9g4DyONBuBRGIODs3vR3vjtmJdl6eXT/ckLohxMx5RLQCaEn+Hrih0D OlKUjD/Uj8dfnZuHP8R0Kjn1/o4QToFcIgwJZrvkbyuFHKhOguMHfNNDzSmF1LKn 1shVWmOT8DGoOIIWpyJd+FgjF/oFpdoZdRC9aMYkGywMRgHgWohGfWoBzXpHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiMWhzt/TrCglmWDoICE7krPq56UwHwYDVR0j BBgwFoAUi+H1CpCTiubU5temoqIvADsHLtgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OGI1OGFlZS1lOGVlLTQyODctYTJiOC02MTYxNTVjM2VlYzIvMC84QkUxRjUwQTkw OTM4QUU2RDRFNkQ3QTZBMkEyMkYwMDNCMDcyRUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJFMUY1MEE5MDkzOEFFNkQ0RTZEN0E2QTJBMjJGMDAzQjA3 MkVEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNThiNThhZWUtZThlZS00Mjg3LWEy YjgtNjE2MTU1YzNlZWMyLzAvOEJFMUY1MEE5MDkzOEFFNkQ0RTZEN0E2QTJBMjJG MDAzQjA3MkVEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALHMINWqjuVQ8Jt1Wo/nYzUdBIKeJY2lrtJ6 ecF55E+hGfkdatf4lRgBaxG/EEJiSBeAcgmCgN65gz2ddyDFCprkh+DiAqJI3dq6 CTlV586BeWXH8tEx6wOS3RkLODp8pUzPIpHs0teidZcw+6poFuBBRSZuZpEs3YaN 0Dy/CFkxBmZL7IweK3AlZJlykXlBbekRO3rUlMJpC1XK6uw+jaY4Tyb48AaA+X9Z CtRpYUR7Y9g/Cgij7iVcFIa7r8VcIT8JhTFwVrRhqGLGbWvh7GABnnG8c+BEBGw4 wG6MA2nyjBZU+yPOEFb1fjoAvKoX/AP58pgOewDLG6H7Ur7HBSk= -----END CERTIFICATE-----Generated at Tue Jun 17 02:10:59 2025 by rpki-client